Malicious code in biotechnology-halley-redgiant-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be587c196677b01b0966672ec9c47b63943494c056f4e7e118ca6ae67eeaa0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176606

Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

EUVD-2025-180264

Malicious code in async-lynx-lithosphere-telesto npm...

Malicious code in link-leda-odin-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ce4b4c89004a0671609cc9894c898727457ffbd1c7baf91492dcab7c4d92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-uglify-js-tethys-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175845

Malicious code in ultra-html-webpack-plugin-zenith-quito npm...

Malicious code in delphinus-run-script-deneb-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1febe7fd885b5c966dc69cd19fd2a810edb9ee8173ed44297bdffb35acb7f615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176231

Malicious code in standard-barnard-quark-yildun npm...

Malicious code in antares-aether-run-script-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c684055290ea8a0fb0bf121b028e590d03ce3cdc6373f64d5b9c922cdee2896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176514

Malicious code in saturnology-enceladus-jest-xml npm...

EUVD-2025-176138

Malicious code in sun-throw-export-xml-java npm...

EUVD-2025-179697

Malicious code in cluster-simple-encrypt-cloud-balance npm...

EUVD-2025-178234

Malicious code in jwt-polaris-accretion-transform npm...

EUVD-2025-179332

Malicious code in deneb-parallax-aldebaran-prettier npm...

EUVD-2025-177540

Malicious code in norma-quantumfoam-loglevel-commitizen npm...

Malicious code in browserify-cosmiconfig-testcafe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfff5428f531d2e4567d0a397bb6f4305ee3665f448b346444bc1f04b258b597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177840

Malicious code in middleware-mini-css-extract-plugin-ignite-json npm...

EUVD-2025-179736

Malicious code in child-process-stratigraphy-subduction-node-sass npm...

Malicious code in biotechnology-corvus-phoebe-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d89363aa906934aa21323a9e5cbbcbac669a622cb76d058c5bc4794c9529f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...